This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Incident Response Analyst based in India.
We are seeking an Incident Response Analyst to help investigate, contain, and remediate cybersecurity incidents across customer environments. In this remote role, you will combine digital forensics, malware analysis, threat intelligence, and incident coordination to respond effectively to evolving security threats. You will examine compromised systems, identify attacker techniques, and develop actionable remediation strategies. Working alongside specialized security operations and threat hunting teams, you will turn investigation findings into stronger detection and response capabilities. You will also contribute to team knowledge-sharing and continuous improvement while supporting critical security escalations in a 24/7 operational environment.
Accountabilities
-
Execute containment and remediation procedures for cybersecurity incidents across customer and prospective customer environments.
-
Coordinate incident response activities to ensure timely and effective resolution of security threats.
-
Conduct forensic investigations of compromised hosts and network assets, identifying the scope and impact of incidents.
-
Develop actionable remediation plans based on forensic findings and investigation results.
-
Analyze potentially malicious files to understand their functionality, behavior, and techniques.
-
Extract indicators of compromise (IOCs) and contribute them to detection capabilities to improve threat identification.
-
Participate in an on-call rotation to support 24/7 security escalations outside standard business hours.
-
Contribute to the enhancement and development of incident response tools, processes, and capabilities.
-
Collaborate with cyber threat intelligence and threat hunting teams to share findings, evidence, and investigation artifacts.
-
Train and support security operations team members on incident response practices and procedures.
-
Previous experience performing incident response within a Security Operations Center (SOC) or an equivalent cybersecurity organization.
-
Hands-on experience with host-based and network digital forensics.
-
Strong knowledge of incident response methodologies, digital forensics, and cyber threat hunting.
-
Ability to identify and understand threat actors’ tactics, techniques, and procedures (TTPs).
-
Familiarity with malware analysis and malicious file investigation.
-
Strong analytical and problem-solving skills, with the ability to assess complex security incidents.
-
Ability to coordinate assignments within a team and communicate technical findings clearly to both technical and non-technical audiences.
-
Preferred: Experience monitoring and working with Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), or Security Information and Event Management (SIEM) solutions.
-
Willingness to participate in an on-call rotation supporting security incidents around the clock.
-
Annual salary range of USD 10,000–13,000, with final compensation depending on seniority, relevant experience, and other job-related factors.
-
Remote working arrangement based in India.
-
Hands-on exposure to real-world cybersecurity incidents and customer environments.
-
Opportunities to deepen expertise in incident response, digital forensics, malware analysis, threat intelligence, and threat hunting.
-
Collaboration with specialized security operations and threat hunting teams.
-
Opportunity to contribute to the improvement of security tools, detection capabilities, and incident response processes.
-
Scope to share knowledge and develop expertise through team training and collaboration.